This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer File: sWmklwDgw7jjmnkTDJh6UADM_-I.cer (raw, json) Hash identifier: hZLqQ3bdScxBO6neG0VnPqgccNZ0Q8wgrE88MaecanY= Subject key identifier: B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C128615C798766319726168111A107E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16302 AS: 206364 IP: 77.246.192.0/20 IP: 79.134.96.0/19 IP: 80.248.240.0/20 IP: 83.142.72.0/21 IP: 185.9.8.0/22 IP: 185.68.56.0/24 IP: 185.163.13.0 -- 185.163.15.255 IP: 188.127.192.0/19 IP: 217.119.32.0/20 IP: 2a00:1190::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:86:15:c7:98:76:63:19:72:61:68:11:1a:10:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b169a49700e0c3b8e39a79130c987a5000ccffe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e8:35:4c:16:68:41:90:ec:e0:83:a9:0e:07: 5a:17:fd:53:45:4b:15:3c:1f:1b:e7:13:c1:39:90: c9:5a:6a:9a:34:8c:13:bf:65:ec:75:b3:fc:89:2e: f1:bb:30:1e:b1:6f:f1:03:c4:b6:c1:f6:0e:49:3a: 4c:72:2c:2c:6c:ac:04:07:82:12:ab:fd:55:42:3d: bd:6d:ca:32:97:d9:52:ac:1b:e6:b7:14:28:fe:a6: 7b:dc:6c:51:d7:a6:c9:e1:86:5e:70:28:14:88:8a: ef:d4:d0:7b:55:ed:39:3e:07:d5:95:39:28:1e:c4: c7:01:14:ab:1c:a2:4a:1f:8e:c7:d4:9f:63:12:e9: df:f9:6c:09:c4:41:19:c4:61:be:36:4b:93:df:85: 15:9a:ca:96:fc:f3:31:43:79:68:74:6e:f0:f4:23: ac:77:ff:18:84:ce:86:4b:31:c5:49:02:93:4a:6c: 17:fd:ed:52:7f:72:8c:c7:92:85:36:09:7c:2f:a7: fe:98:04:13:a0:b6:d5:ab:d4:52:fb:88:98:a8:b1: b6:95:f5:1c:d2:0c:1e:8d:7d:3b:57:cf:be:3f:91: 77:64:c2:fb:f3:e6:05:15:97:0b:35:b7:d9:cf:e4: 82:d9:5a:3b:ab:bc:fc:09:5b:f2:20:61:20:bb:a4: 14:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.246.192.0/20 79.134.96.0/19 80.248.240.0/20 83.142.72.0/21 185.9.8.0/22 185.68.56.0/24 185.163.13.0-185.163.15.255 188.127.192.0/19 217.119.32.0/20 IPv6: 2a00:1190::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16302 206364 Signature Algorithm: sha256WithRSAEncryption 08:81:5e:66:0b:b3:ac:50:12:c1:cb:26:6a:93:45:03:d0:ab: 68:94:2c:44:d2:6c:d4:00:e0:ae:7d:96:24:0a:08:bf:ad:16: 4b:64:7d:0b:56:24:c5:19:0d:b1:7a:3f:05:a7:ab:cc:32:bd: 13:68:39:87:cf:20:f2:ed:b9:aa:a4:28:11:c7:25:06:0d:76: 57:25:a4:e2:5e:d9:f9:8a:9d:99:3d:20:6b:df:cc:cf:de:d4: 10:71:a8:6d:80:5e:c6:09:dc:5d:3e:0a:c1:67:84:15:7e:19: a1:72:b0:4e:18:a4:75:61:71:9b:80:1a:3e:2d:22:fb:ed:72: 5d:b7:aa:44:98:e4:43:5b:22:ee:67:66:7d:8c:fa:b0:be:47: 13:d6:1c:0e:e4:d4:d9:ce:23:6b:53:c1:b2:86:38:20:e5:6c: 88:c3:48:dc:56:91:4c:c9:47:fd:47:78:a2:15:e1:98:f1:d9: 0d:5f:e4:23:82:fc:71:e7:7a:3b:77:c7:96:ba:ab:9c:c0:e9: 32:bc:8d:af:3f:af:02:91:9e:47:ac:d7:e0:c6:69:ac:cd:3d: 56:50:ae:41:d1:ca:9e:84:74:cc:85:b3:af:ca:3f:88:21:12: e1:75:13:b8:db:7d:3c:d6:82:ab:3d:5a:9d:76:22:09:68:eb: 29:55:dd:2e -----BEGIN CERTIFICATE----- MIIF3zCCBMegAwIBAgISAZt8EoYVx5h2YxlyYWgRGhB+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTY5YTQ5NzAwZTBjM2I4ZTM5YTc5MTMwYzk4N2E1MDAwY2NmZmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeg1TBZoQZDs4IOpDgdaF/1TRUsV PB8b5xPBOZDJWmqaNIwTv2XsdbP8iS7xuzAesW/xA8S2wfYOSTpMciwsbKwEB4IS q/1VQj29bcoyl9lSrBvmtxQo/qZ73GxR16bJ4YZecCgUiIrv1NB7Ve05PgfVlTko HsTHARSrHKJKH47H1J9jEunf+WwJxEEZxGG+NkuT34UVmsqW/PMxQ3lodG7w9COs d/8YhM6GSzHFSQKTSmwX/e1Sf3KMx5KFNgl8L6f+mAQToLbVq9RS+4iYqLG2lfUc 0gwejX07V8++P5F3ZML78+YFFZcLNbfZz+SC2Vo7q7z8CVvyIGEgu6QUyQIDAQAB o4IC6zCCAucwHQYDVR0OBBYEFLFppJcA4MO445p5EwyYelAAzP/iMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1LzM5MDgx Zi01MDAzLTQxZWQtYjgwYS0zZmFlMDM0YzQ4OWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvMzkwODFm LTUwMDMtNDFlZC1iODBhLTNmYWUwMzRjNDg5ZS8xL3NXbWtsd0Rndzdqam1ua1RE Smg2VUFETV8tSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGCCsGAQUF BwEHAQH/BFcwVTBEBAIAATA+AwQETfbAAwQFT4ZgAwQEUPjwAwQDU45IAwQCuQkI AwQAuUQ4MAwDBAC5ow0DBAS5owADBAW8f8ADBATZdyAwDQQCAAIwBwMFAyoAEZAw HgYIKwYBBQUHAQgBAf8EDzANoAswCQICP64CAwMmHDANBgkqhkiG9w0BAQsFAAOC AQEACIFeZguzrFASwcsmapNFA9CraJQsRNJs1ADgrn2WJAoIv60WS2R9C1YkxRkN sXo/BaerzDK9E2g5h88g8u25qqQoEcclBg12VyWk4l7Z+YqdmT0ga9/Mz97UEHGo bYBexgncXT4KwWeEFX4ZoXKwThikdWFxm4AaPi0i++1yXbeqRJjkQ1si7mdmfYz6 sL5HE9YcDuTU2c4ja1PBsoY4IOVsiMNI3FaRTMlH/Ud4ohXhmPHZDV/kI4L8ced6 O3fHlrqrnMDpMryNrz+vApGeR6zX4MZprM09VlCuQdHKnoR0zIWzr8o/iCES4XUT uNt9PNaCqz1anXYiCWjrKVXdLg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:05 2026 by rpki-client